Cybersecurity Operations Manager

The world still has coverage blind spots. You could help eliminate them at Skylo. Skylo has pioneered a standards-based approach to satellite connectivity. We connect smartphones and IoT devices directly to satellites. No special hardware, no entirely new networks. Just billions of existing devices, suddenly reachable anywhere on Earth. We're not building toward this future. We're already in it. Our direct-to-device service is live on millions of activated devices across five continents, covering more than 72 million square kilometers, in partnership with leading satellite operators, mobile network operators, Tier-1 chipset makers, and OEMs worldwide. And we're just getting started. At the heart of it all is Skylo's commercial NTN vRAN: a 3GPP standards-based, cloud-native platform that seamlessly bridges terrestrial and satellite networks. It's the infrastructure that makes true anywhere, anytime connectivity possible. When you join Skylo, you'll work at the intersection of three markets reshaping how the world stays connected: mass-market consumer devices, automotive, and industrial IoT. Enabling people outdoors and critical workflows in the world's most remote places. This is a rare chance to work on technology that matters, at a company that's already proving it works This role is located in Bangalore, India where we are onsite 3 days a week in office. Summary Of How You Will Impact Skylo Skylo is building satellite-to-device (NTN) connectivity infrastructure connecting mobile network operators worldwide. Security Operations is the most critically understaffed pillar in our InfoSec build-out relative to its 24/7 mandate, and we're hiring a Cybersecurity Manager to stand up and lead this function from the ground up — covering detection, monitoring, incident response, and threat management across our satellite network, ground infrastructure, and enterprise systems. You'll build the SOC function from scratch rather than inherit one — shaping tooling, process, and team structure for a company defining a new category of critical connectivity infrastructure. How You Will Contribute Build and lead Skylo's Cyber Fusion Center function, including staffing model, shift/coverage strategy, and escalation processes for 24/7 monitoring Own the SIEM/EDR/XDR stack — deployment, tuning, use-case development, and detection engineering Lead incident response: triage, containment, root cause, and post-incident reporting for security events across cloud, corporate IT, data center and product environments Define and mature SOC processes — runbooks, playbooks, escalation paths, and metrics (MTTD, MTTR, alert fidelity) Manage and mentor SOC analysts as the team scales through phased hiring Partner with Network Operation, Product Security, Cloud Security, and GRC to ensure shared visibility and coordinated response Stand up a Cyber Threat Intelligence (CTI) capability — sourcing, curating, and operationalizing threat feeds and IOCs relevant to telco/satellite/NTN threat actors Translate CTI into proactive detection content, threat hunting hypotheses, and risk briefings for leadership Report SOC metrics and risk posture to Head of InfoSec and leadership; contribute to exec-level reporting Support compliance evidence gathering for ISO 27001, NIS2, and other frameworks tied to detection and response controls Good understanding of MITRE ATT&CK, FiGHT, D3FEND, IOC analysis, and threat detection. Build automated/SOAR response on thematic incidents What We're Looking For 8+ years in security operations/incident response, with 2+ years in a SOC leadership or team-lead role Hands-on experience standing up or significantly maturing a SOC function, ideally in a scaling or greenfield environment Deep familiarity with SIEM/EDR/XDR platforms (e.g., Splunk, Sentinel, CrowdStrike, SentinelOne) — deployment and tuning, not just operation Strong incident response fundamentals: forensics, threat hunting, containment strategy Experience building or running a Cyber Th